Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (J-Web)

1. Enable clusters. See Step 1 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (CLI).
2. Configure the management interface. See Step 2 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (CLI).
3. Configure the fabric interface. See Step 3 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (CLI).
4. Configure the redundancy groups.
   • Select Configure>System Properties>Chassis Cluster.
   • Enter the following information, and then click Apply:
     • Redundant ether-Interfaces Count: 2
     • Heartbeat Interval: 1000
     • Heartbeat Threshold: 3
     • Nodes: 0
     • Group Number: 0
     • Priorities: 254
   • Enter the following information, and then click Apply:
     • Nodes: 0
     • Group Number: 1
     • Priorities: 254
   • Enter the following information, and then click Apply:
     • Nodes: 1
     • Group Number: 0
     • Priorities: 1
   • Enter the following information, and then click Apply:
     • Nodes: 1
     • Group Number: 1
     • Priorities: 1
     • Preempt: Select the check box.
     • Interface Monitor—Interface: xe-5/0/0
     • Interface Monitor—Weight: 255
     • Interface Monitor—Interface: xe-5/1/0
     • Interface Monitor—Weight: 255
     • Interface Monitor—Interface: xe-17/0/0
     • Interface Monitor—Weight: 255
     • Interface Monitor—Interface: xe-17/1/0
     • Interface Monitor—Weight: 255
5. Configure the redundant Ethernet interfaces.
   • Select Configure>System Properties>Chassis Cluster.
   • Select xe-5/1/0.
   • Enter reth1 in the Redundant Parent box.
   • Click Apply.
   • Select xe-17/1/0.
   • Enter reth1 in the Redundant Parent box.
   • Click Apply.
   • Select xe-5/0/0.
   • Enter reth0 in the Redundant Parent box.
   • Click Apply.
   • Select xe-17/0/0.
   • Enter reth0 in the Redundant Parent box.
   • Click Apply.
   • See Step 5 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (CLI).
6. Configure the IPsec configuration. See Step 6 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (CLI).
7. Configure the static routes .
   • Select Configure>Routing>Static Routing.
   • Click Add.
   • Enter the following information, and then click Apply:
     • Static Route Address: 0.0.0.0/0
     • Next-Hop Addresses: 10.2.1.1
   • Enter the following information, and then click Apply:
     • Static Route Address: 10.3.0.0/16
     • Next-Hop Addresses: 10.10.1.2
8. Configure the security zones. See Step 8 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (CLI).
9. Configure the security policies. See Step 9 in Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (CLI).
10. Click OK to check your configuration and save it as a candidate configuration, then click Commit Options>Commit.

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• Understanding Active/Passive Chassis Cluster Deployment with an IPsec Tunnel
• Example: Configuring an Active/Passive Chassis Cluster Pair with an IPsec Tunnel (CLI)
• Understanding What Happens When Chassis Cluster Is Enabled
• Understanding Chassis Cluster Formation